Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: nwOCNbOTideaGxqT3ZIswY0vCoQy5+YBNoYNEHQUA9U=
Subject key identifier: 8C:CC:E2:CD:DD:8F:C5:FF:3C:26:47:48:21:E6:2B:11:25:AB:44:0D
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 01984777882B8A37D9EEB55415D2C8B6F34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 9F
Signing time: Sat 26 Jul 2025 16:01:12 +0000
Manifest this update: Sat 26 Jul 2025 16:01:12 +0000
Manifest next update: Sun 27 Jul 2025 16:01:12 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: k6779DosD0QCJT5d5twrEinTAB5/XMXUcoBnv7XZZHY=)
2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:88:2b:8a:37:d9:ee:b5:54:15:d2:c8:b6:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Jul 26 16:01:12 2025 GMT
Not After : Jul 27 16:01:12 2025 GMT
Subject: CN=8ccce2cddd8fc5ff3c26474821e62b1125ab440d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:8a:98:04:19:84:2e:1d:6c:a3:1c:78:1c:
1b:54:4e:8c:2e:54:7c:e8:8b:20:9b:be:a5:bc:64:
71:af:5d:af:18:4e:61:dd:18:a8:02:9f:f6:1e:a1:
34:20:b9:5e:98:bf:e8:dc:09:ed:12:30:b6:57:7a:
28:98:d3:38:a4:43:9e:e5:d1:e8:ba:78:50:f9:07:
31:8d:dc:ea:f8:b5:43:e8:37:c8:a7:56:78:68:85:
aa:31:f7:eb:03:68:91:41:1e:30:4f:87:cf:c6:23:
e2:ae:11:9e:77:b8:42:ea:de:cb:b1:e7:20:dc:4c:
18:da:dd:ca:cd:8c:a9:c7:ba:0e:61:02:20:5c:0b:
5f:5f:05:f9:47:ed:9d:25:1b:a9:1a:b4:0c:cd:c9:
62:6f:06:c8:0f:e0:52:f0:b4:43:fb:4f:97:07:48:
23:b9:cb:16:d1:d5:5d:16:e3:8f:83:92:33:72:88:
d3:71:c6:b4:d9:9a:28:61:1e:ce:74:89:e1:91:28:
44:04:12:8f:8d:7a:e5:89:46:17:e5:46:41:1d:dd:
3b:71:ba:5d:b6:d5:df:03:23:b2:6b:b2:4b:e6:6f:
92:56:79:6e:a1:53:42:17:a6:8b:fa:50:d9:ef:ba:
0e:9f:b2:b3:05:90:78:c0:e0:eb:84:18:bb:24:2a:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:E2:CD:DD:8F:C5:FF:3C:26:47:48:21:E6:2B:11:25:AB:44:0D
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3e:58:94:48:da:c3:0d:80:61:aa:69:21:8a:0c:3f:0b:85:
fe:6d:3b:df:18:cb:38:59:a4:78:df:78:cc:e0:9e:b3:4d:11:
b8:23:b8:3e:68:83:83:9a:57:e2:ab:d0:22:a2:d8:95:35:d1:
a5:d1:db:f1:f9:6b:f0:f9:c9:b8:bb:34:ef:6c:5c:03:18:76:
1c:86:f1:64:44:90:ba:ca:43:c9:31:e5:42:10:b6:7b:bb:6e:
cf:3d:ac:d7:55:5e:6c:f5:52:9f:5f:08:7b:d7:18:fa:92:12:
06:ea:b9:f8:d8:ee:a6:02:8a:24:54:b5:20:12:fc:a5:f2:98:
83:a8:4b:95:d9:91:02:bf:9c:19:72:1a:76:3f:63:44:5a:fc:
50:5f:19:1b:8b:55:d8:9a:a5:5d:aa:77:55:6d:4d:74:d1:6a:
ae:4f:b9:e1:0b:f8:3c:dd:0c:d4:fa:fc:78:b6:e9:64:0d:9d:
fa:7b:fa:93:e1:eb:ca:7c:f5:4d:f4:ee:2b:20:98:58:70:d7:
82:0a:f8:fc:0e:a5:13:c0:20:c1:8e:02:72:8e:3f:33:29:bd:
35:90:f5:c7:95:2f:5f:4d:68:89:06:e8:e7:e7:3e:6d:ca:9e:
77:bf:6f:c7:7f:77:92:11:56:7c:4d:16:e0:e9:a6:3a:c1:ef:
e1:3b:de:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:50:52 2025 by rpki-client